foreign-trade-research
Warn
Audited by Snyk on Aug 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). SKILL.md 的运行时路径要求通过 Exa 的
web_search_advanced_exa(以及结果不足时的 Playwright 直接访问网页)主动获取并让 LLM 读取/解析第三方网页与其文本(新闻、公司主页、推文、评论等),从而可能被外部作者投喂的提示注入内容影响。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata